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Method for Altering a Word Stored in a Write-Once Memory Device 
Background 

Non-volatile memory is becoming standard in many products such as digital 
cameras and digital audio players, and write-once memory devices offer the advantage of 
low manufacturing costs. Despite its advantages, a write-once memory device cannot be 
erased since the original, un-programmed state of a memory location cannot be restored 
once the memory location is switched to the programmed state. However, a user may 
wish to delete sensitive data, such as financial information, from a write-once memory 
device. Further, some upcoming copy protection standards, such as Secure Digital Media 
Interface, require memory contents to be erased. 

There is a need, therefore, for a method for altering a word stored in a write-once 
memory device. 

Summary 

The present invention is defined by the following claims, and nothing in this 
section should be taken as a limitation on those claims. 

By way of introduction, the preferred embodiments described below provide a 
method for altering a word stored in a write-once memory device. In one preferred 
embodiment, a write-once memory device is provided storing a word comprising a 
plurality of data bits and a plurality of syndrome bits. The word is altered by identifying 
X bit(s) in the word that are in an un-programmed state and switching the X bit(s) from 
the un-programmed state to a programmed state, where X is sufficient to introduce an 
uncorrectable error in the word. Other preferred embodiments are provided, and each of 
the preferred embodiments can be used alone or in combination with one another. 

The preferred embodiments will now be described with reference to the attached 
drawings. 

Brief Description of the Drawings 

Figure 1 is an illustration of a bit layout of a preferred embodiment. 



Figure 2 is a flowchart of a method of a preferred embodiment for altering a word 
stored in a write-once memory device. 

Figure 3 is an illustration of a word stored in a write-once memory device of a 
preferred embodiment. 

Figure 4 is an illustration of the word of Figure 3 with bits 4 and 7 switched from 
an un-programmed state to a programmed state. 

Figure 5 is an illustration of a new word created to switch bits 4 and 7 from an un- 
programmed state to a programmed state. 

Figure 6 is an illustration of the word of Figure 3 overwritten with the new word 
of Figure 5. 

Figure 7 is a flowchart of a method of a preferred embodiment for altering a word 
stored in a write-once memory device. 

Figure 8 is an illustration of a word created to switch bit 7 from an un- 
programmed state to a programmed state. 

Figure 9 is an illustration of the word of Figure 3 overwritten with the word of 
Figure 8. 

Detailed Description of the Presently 
Preferred Embodiments 

The preferred embodiments described below relate to write-once memory devices. 
In a write-once memory device, an original, un-programmed state of a memory location 
(Le. , a "bit") cannot be restored once switched to a programmed state. In a two-state 
system, the un-programmed state is Logic 1 (or Logic 0), and the programmed state is 
Logic 0 (or Logic 1). In a multi-state system, there is one un-programmed state {e.g.. 
Logic 0), and multiple programmed states (e.g., Logic 1, Logic 2, etc.). For purposes of 
illustrating these preferred embodiments, the un-programmed state is Logic 1, and the 
programmed state is Logic 0. Preferably, the write-once memory device is field- 
programmable to allow a bit that is fabricated in an un-programmed state to be switched 
to a programmed state at a time after fabrication of the memory device. 



Because the un-programmed state of a bit cannot be restored once it is switched to 
the programmed state, data stored in a write-once memory device cannot be erased. U.S. 
Patent Application Serial No. 09/638,439, which is assigned to the assignee of the present 
invention and is hereby incorporated by reference, presents a method for making stored 
data difficult or impossible to read by overwriting the data with a destructive pattern. For 
example, each bit of data (e.g., 11010110) can be overwritten with a pattem of Os, thereby 
placing each bit in the programmed state (e.g,, 00000000). While programming all bits in 
an area to be deleted completely obliterates the data in that area, this approach can cause 
performance degradation of the memory device since performance properties such as 
speed and power degrade as the number of programmed bits increases. In another 
approach, an extra bit can be associated with a data string, and this extra bit is 
programmed when a command is received to delete the data string. When a host device 
attempts to read the data stream, the memory device or the host device determines 
whether the extra bit is in the programmed or un-programmed state. If the extra bit is in 
the un-programmed state, the data string is read from the memory device. If the extra bit 
is in the programmed state, the data string is considered deleted and will not be read from 
the memory device. While this approach avoids the performance degradation described 
above, it requires adding extra bits and control logic, which may not be possible in some 
memory devices. 

The preferred embodiments presented herein provide a technique to delete data in 
a write-once memory device while avoiding the performance degradation and memory 
design modifications associated with the approaches discussed above. Some of these 
preferred embodiments take advantage of error protection schemes to alter bits stored in 
the write-once memory device. As used herein, the term "error protection scheme" refers 
to any technique that uses a plurality of syndrome bits and a plurality of data bits to detect 
and/or correct certain types of errors in the word containing the plurality of data and 
syndrome bits. Suitable error protection schemes include, but are not limited to, error 
correcting code (ECC), Reed-Solomon, BCH, Golay, and Viterbi. The preferred 
embodiments will be described v^th reference to an ECC scheme using a Hammhig (k, n) 
code. With the Hamming (k, n) code, (k-n) syndrome bits are used to identify and correct 



a single-bit error in a word of k bits. The presence of two or more errors in the k-bit word 
cannot be corrected. While it is preferred that a Hamming (72, 64) code scheme be 
implemented, for simplicity, a Hamming (7, 4) code scheme will be used to illustrate 
these preferred embodiments with the bit layout depicted in Figure 1 . The seven-bit word 
in Figure 1 contains four data bits (bits 4-7) and three syndrome bits (bits 1-3). The first 
syndrome bit (bit 1) is the parity of data bits 4, 5, and 7; the second syndrome bit (bit 2) is 
the parity of data bits 4, 6, and 7; and the third syndrome bit (bit 3) is the parity of data 
bits 5, 6, and 7. While the syndrome bits are located adjacent the data bits in Figure 1, the 
syndrome bits can be dispersed within the word or located in a different part of the 
memory device. It is preferred that data and syndrome bits be distributed in the write- 
once memory device usmg the technique described in "Memory Device and Method for 
Storing Bits in Non-Adjacent Storage Locations in a Memory Array " U.S. Patent 

Application Serial No. (Attorney Docket No. 10519/60, filed on the same day as the 

present application), which is hereby incorporated by reference. 

In one preferred embodiment, data is "deleted" by altering enough data bits and/or 
syndrome bits to introduce an error in the word that is uncorrectable using the error 
protection scheme. Such an uncorrectable error exceeds the protection limit of the error 
protection scheme. For example, a Hammmg code scheme can correct a single-bit error. 
However, if at least two bits (data bits and/or syndrome bits, if the memory design allows 
access to the syndrome bits) are altered, the Hamming code will not be able to correct the 
alteration made to the word. Additionally, with some words, an uncorrectable bit error 
will cause the error protection scheme to further scramble the data bits when it attempts 
to correct the uncorrectable error. As a result, the data bits read from the memory device 
will be different from the data bits originally stored in the memory device. Although the 
bits of a digital file cannot be restored to their original, un-programmed state, the bits can 
be sufficiently changed so that they no longer represent their original content. 
Accordingly, these preferred embodiments can be used in response to a command from a 
user or from a host device to delete a digital file. As used herein, an action is performed 
"in response to" an event when that action is performed immediately after the event or at 
some time after the event. When a stored digital file is deleted, one or more words 



associated with that digital file are altered. As also used herein, a word is associated with 
a stored digital file when it contains data that is part of the file itself For example, if an 
uncorrectable error is introduced into a word containing audio data, "gaps" in the audio 
may be heard when the data is played back. This alteration of the audio data may be 
considered sufficient to "delete" the file. A word is also associated with a stored digital 
file when it contains data that is part of a file system structure. Consider, for example, the 
situation in which the word contains data for a pointer in a file allocation table that 
identifies the physical address of memory cells of a particular file. By altering the 
pointer, a file system of a host device would not be able to locate and retrieve the file, 
rendering the file inaccessible to a user. In addition to deleting data, these preferred 
embodiments can be used more generally to alter a word stored in a write-once memory 
device. 

Turning again to the drawings, Figure 2 is a flow chart 20 of a method of altering 
a word stored in a write-once memory device and will be discussed in conjunction with 
the illustrations of Figure 3-6. Because a bit in the programmed state cannot be restored 
to the un-programmed state in a write once memory device, only un-programmed bits can 
be altered (by switching the bit from the un-programmed state to the programmed state). 
Accordingly, the first act in this method is to identify X bit(s) in a word that are in an un- 
programmed state, where "X" is sufficient to introduce an uncorrectable error in the word 
(act 22). For example, with the Hamming code, altering two or more bits is sufficient to 
introduce an uncorrectable error in the word. Accordingly, X=2 or more. In the word 
depicted in Figure 3, bits 2, 4, 6, and 7 are in the un-programmed state. For this example, 
assxmie X is chosen to be the smallest possible number (here, 2), and bits 4 and 7 are 
identified as being in the un-programmed state. 

With reference again to Figure 2, the next act in this method is to sv^tch the X 
bit(s) from the un-programmed state to the programmed state (act 24). If individual bits 
in a word can be switched without overwriting the word with a replacement word, this act 
can simply entail programming the bits that are to be switched. For example, as shown in 
Figure 4, bits 4 and 7 can be programmed without regard to the other bits in the word. 
Because two bits in the word were altered, the Hamming code protecting this word will 



not be able to correct the alteration made to the word. Some memory devices do not 
allow programming on the bit level but instead require programming on the word level 
With these memory devices, to switch a bit from the un-programmed state to the 
programmed state, a word containing that bit must be overwritten with a new word. For 
example, to switch bits 4 and 7 in the word shown in Figure 3, a new word is generated, 
where the data bits in the word are "0" in bits 4 and 7 and "1" in the remaining bits. New 
syndrome bits are generated based on those new data bits. The new word is depicted in 
Figure 5. The stored word (shown in Figure 3) is then overwritten with the new word. 
Because the memory device is write-once, the result of the overwrite operation is the 
logical "and" of the two words. The resuh of the overwrite is shown in Figure 6. As seen 
by a comparison of Figures 6 and 3, the altered data bits (0100) are different from the 
originally-stored data bits (1101). 

It should be noted that the acts of identifying X bit(s) that are in the un- 
programmed state and sv^tching the X bit(s) from the un-programmed state to the 
programmed state cover the situation in which more than X bit(s) are identified in the un- 
programmed state and only X bit(s) are switched to the programmed state. For example, 
in Figure 3, four bits (bits 2, 4, 6, and 7) can be identified as being in the un-programmed 
state, and only two of those bits (bits 4 and 7) can be switched to the programmed state. 
Two bits (X bits) were still identified and svdtched even though two additional bits were 
identified but not switched. 

As discussed above, with the Hamming code, altering two bits (X=2) is sufficient 
to introduce an uncorrectable error in a word. However, it is highly likely that 
programming a single data bit will cause a change to one or more of the syndrome bits of 
a word. Accordingly, identifying and switching a single bit (X=l) can also result in a 
double-bit error. Since it is faster to find a single bit in the im-programmed state than it is 
to find two bits in the un-programmed state, this approach takes less time to implement 
than the approach discussed above. This method will now be discussed in conjunction 
with the flow chart 30 of Figure 7. First, a single un-programmed bit in the plurality of 
data bits of the word is identified (act 32). With reference to Figure 3, in this example, 
bit 7 is identified as being in the un-programmed state. Next, a second word is generated 



comprising a second plurality of data bits and a second plurality of syndrome bits (act 
34). In the second word, all of the second plurality of data bits are in the un-programmed 
state except for a bit that corresponds to the single bit. With reference to Figure 8, bits 4- 
6 are in the un-programmed state, and bit 7 (which corresponds to the single bit identified 
as being in the un-programmed state) is in the programmed state. As shown in Figure 8, 
new syndrome bits (000) are generated for the data bits (0111). Finally, the first word 
stored in the write-once memory device is overwritten with the second word (act 36). As 
discussed above, with a write-once memory device, the result of the overwrite operation 
is the logical ''and" of the first and second words. The result of the overwrite is shown in 
Figure 9. 

As seen by comparing the original word shown m Figure 3(1101010) with the 
result of the overwrite shown in Figure 9 (0101000), identifying and switching a single 
bit (bit 7) resuhs in a double-bit error (bits 7 and 2). When the word is read fi-om the 
memory device, the ECC mechanism will detect that syndrome bits 1 and 3 are incorrect. 
Based on this detection, the ECC mechanism will assume that a single-bit error occurred 
at bit 5 and will attempt to correct the error by switching the value of bit 5, thereby 
further scrambling the original data bits. Accordingly, the data bits originally stored as 
11 0 1 are read as 0 1 1 1 . As shown by this example, taking advantage of an error 
protection scheme to cause "ECC hashing" is an inexpensive programming trick that can 
be used to provide good "data scrubbing" and without modifying the memory design and 
without incurring the full degradation associated with programming all bits to obliterate 
data (i.e. , at less cost to device performance than a full write). Additionally, since less 
power is required to read an un-programmed bit than a programmed bit, this preferred 
embodiment offers increased power savings on read as compared to the approach that 
completely obliterates a word with programmed bits 

It is possible that programming a single data bit will not cause a change to one or 
more of the syndrome bits of the word and, thus, not produce an uncorrectable error. In 
an altemate embodiment, it is first determined whether switching a single bit to the 
programmed state will create an uncorrectable error. If switching the single bit will create 
an uncorrectable error, the approach discussed above is implemented. If switching a 
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single bit will not create an uncorrectable error, two (or more) un-programmed bits are 
identified and switched to the programmed state. 

The write-once memory device can take any suitable form, such as a solid-state 
memory device (i.e., a memory device that responds to electrical read and write signals to 
cause digital information to be read from and stored in a memory array of the device), a 
magnetic storage device (such as a hard drive), or an optical storage device (such as a CD 
or DVD). In one preferred embodiment, the write-once memory device t^es the form of 
a solid-state memory device having a three-dimensional array, as described in U.S. Patent 
No. 6,034,882 to Johnson et al, U.S. Patent No. 5,835,396 to Zhang, and U.S. patent 
application serial no. 09/560,626, all of which are hereby incorporated by reference. As 
discussed in those documents, three-dimensional memory arrays provide important 
economies in terms of reduced size and associated reductions in manufacturing cost. 
Whether two- or three-dimensional, the memory array preferably comprises non-volatile 
passive element memory cells. Although any suitable type of memory cell can be used, in 
one preferred embodiment, the memory cell comprises an anti-fuse and a diode. It is 
important to note that the following claims should not be read as requiring a specific type 
of write-once memory device (e.g., solid-state or optical) or specific type of memory 
array (e,g,, two dimensional or three-dimensional) unless explicitly recited therein. 

In one preferred embodiment, the write-once memory device takes the form of a 
modular, compact, handheld unit, such as a memory card or stick, that comprises an 
external electrical connector that can be coupled with a host device, such as a digital 
camera, digital audio player, or other portable consumer product. As used herein, the 
terms "coupled with" and "connected to" are intended broadly to cover elements that are 
coupled v^th or connected to one another either directly or indirectly through one or more 
intervening components. The error protection scheme can be implemented as a hardware 
and/or software component in the write-once memory device. For example, the write- 
once memory device can comprise a hardware component that generates syndrome bits 
firom data bits received from the host device and corrects errors in words read from the 
memory array. Altematively, the error protection scheme can be implemented as a 
hardware and/or software component in the host device. For example, the file system in 
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the host device can be responsible for generating the syndrome bits and for correcting 
errors in words read from the write-once memory device. Additionally, the functionality 
of the error protection scheme can be distributed between the write-once memory device 
and the host device. 

Although a hardware implementation can be used (e.g., logic on an integrated 
circuit), it is preferred that the embodhnents described above be implemented in software 
due to the shorter time needed to implement, debug, and upgrade a software system as 
compared to a hardware implementation. It is preferred that the software used be small 
and fast. Appendix 1 contains a C-program listing that can be used to find an un- 
programmed bit within a machine's native word size in 0(log(N)) time. While the 
example is for a 32-bit machine, the number of entries in the partition array and iterations 
in the search loop can be changed for different word sizes. 

It is intended that the foregoing detailed description be understood as an 
illustration of selected forms that the invention can take and not as a definition of the 
invention. It is only the following claims, including all equivalents, that are intended to 
define the scope of this invention. Finally, it should be noted that any aspect of any of the 
preferred embodiments described herein can be used alone or in combination with one 
another. 
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APPENDIX 1 



/* 

* Find an un-programmed bit, T, in the passed word. In this example 
5 * the machine's native word is 32 bits. The return value is a new 

* value which when written to memory will cause ECC scrambling. 

*/ 

unsigned long FindBit(unsigned long word) 
{ 

10 unsigned mask; 

unsigned i; 

/* 

* The partition array is used to locate where ' 1' in a field 

* that shrinks by 2 for each iteration. 

f I static unsigned long partition[] = { 
S OxffffOGOG, /* upper 1 6 bits of field */ 

B OxffOOfTOO, /* upper 8 bits of field */ 

W OxfOfDfDfD, /* upper 4 bits of field */ 

itiO Oxcccccccc, /* upper 2 bits of field */ 

y Oxaaaaaaaa /* upper 1 bit of field */ 

}; 

I /* 

f^i * It takes log2(32) == 5 iterations to form a mask identifying 

* where a ' 1' exists. 

O mask = word; 

IN' for(i = 0;i !=5;++i) 

if (mask & partition[i]) 
3 0 mask &= partition[i] ; 

else 

mask &= ~partition[i]; 

/* 

* Form and retum the program value to cause scrambling. 
35 */ 

work &= -mask; 
retum (word); 

} 
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